OBS User unknown 2007-09-10 22:48:13 +00:00 committed by Git OBS Bridge
parent ce2eb867b9
commit d318be736a
3 changed files with 16 additions and 9 deletions

View File

@ -17,7 +17,7 @@
+ use_pkcs11_module = nss;
+
+ pkcs11_module nss {
+ nss_dir = /etc/pki/nssdb;
+ nss_dir = /etc/ssl/nssdb;
+ crl_policy = none;
+ }

View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Thu Sep 6 21:08:43 CEST 2007 - jberkman@novell.com
- use the same directory for nssdb as the kerberos pkinit plugin
-------------------------------------------------------------------
Tue Jul 31 17:34:21 CEST 2007 - sbrabec@suse.cz

View File

@ -12,7 +12,7 @@
Name: pam_pkcs11
Version: 0.6.0
Release: 4
Release: 16
URL: http://www.opensc-project.org/pam_pkcs11/
Group: Productivity/Security
License: LGPL v2 or later
@ -30,21 +30,21 @@ BuildRequires: curl-devel libopenssl-devel libxslt mozilla-nss-devel openldap2-
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
This Linux PAM module allows X.509 certificate-based user
This Linux PAM module allows X.509 a certificate-based user
authentication. The certificate and its dedicated private key are
thereby accessed by means of an appropriate PKCS #11 module. For
thereby accessed by means of an appropriate PKCS #11 module. For the
verification of the users' certificates, locally stored CA certificates
as well as online or locally accessible CRLs are used.
Additionally, the package includes pam_pkcs11-related tools: -
pkcs11_eventmgr: Generate actions on card insert, removal, or
Additionally, the package includes pam_pkcs11-related tools: *
pkcs11_eventmgr: Generates actions on card insert, removal, or
time-out events
- pklogin_finder: Get the login name that maps to a certificate
* pklogin_finder: Gets the login name that maps to a certificate
- pkcs11_inspect: Inspect the contents of a certificate
* pkcs11_inspect: Inspects the contents of a certificate
- make_hash_links: Create hash link directories for storing CAs and
* make_hash_links: Creates hash link directories for storing CAs and
CRLs
@ -118,6 +118,8 @@ rm -rf $RPM_BUILD_ROOT
%config(noreplace) %{_sysconfdir}/pam.d/common-auth-smartcard
%changelog
* Thu Sep 06 2007 - jberkman@novell.com
- use the same directory for nssdb as the kerberos pkinit plugin
* Tue Jul 31 2007 - sbrabec@suse.cz
- Build with NSS instead of openssl.
- Applied patches from Jacob Berkman: MS UPN OID and NSS